nerdexam
CompTIA

SY0-301 · Question #619

Which of the following is the MOST likely cause of users being unable to verify a single user's email signature and that user being unable to decrypt sent messages?

The correct answer is A. Unmatched key pairs. Unmatched key pairs occur when the public key published for a user does not correspond to the private key they hold, preventing others from verifying signatures and the user from decrypting received messages.

General security concepts

Question

Which of the following is the MOST likely cause of users being unable to verify a single user's email signature and that user being unable to decrypt sent messages?

Options

  • AUnmatched key pairs
  • BCorrupt key escrow
  • CWeak public key
  • DWeak private key

How the community answered

(33 responses)
  • A
    79% (26)
  • B
    12% (4)
  • C
    6% (2)
  • D
    3% (1)

Why each option

Unmatched key pairs occur when the public key published for a user does not correspond to the private key they hold, preventing others from verifying signatures and the user from decrypting received messages.

AUnmatched key pairsCorrect

In asymmetric cryptography, a sender encrypts a message with the recipient's public key and the recipient decrypts with their matching private key - if the keys do not mathematically correspond, decryption fails. Similarly, a digital signature is created with a private key and verified with the paired public key - a mismatch means verification fails for all recipients. Both symptoms described in the question - failed signature verification by others and failed decryption by the user - point precisely to a public/private key pair mismatch.

BCorrupt key escrow

Key escrow stores backup copies of keys for authorized recovery; corruption would affect recovery scenarios but would not cause both signature verification failure and decryption failure simultaneously.

CWeak public key

A weak public key reduces cryptographic strength but does not cause complete decryption failure or prevent signature verification.

DWeak private key

A weak private key reduces security against brute-force attacks but still functions for signing and decryption as long as the key pair is matched.

Concept tested: PKI key pair mismatch signature and decryption failure

Source: https://learn.microsoft.com/en-us/windows/win32/seccrypto/public-private-key-pairs

Topics

#key pairs#PKI#digital signatures#asymmetric encryption

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice